This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa File: 1c886de0-6a95-394f-b0ec-798264a9c720.roa (raw, json) Hash identifier: PGLFD0Gm1RjsdWI/gmPyv866PudIUm0pVIvZhRAH8Mw= Subject key identifier: 32:19:8C:F3:80:A9:3F:40:58:A2:5D:7A:9B:D5:5E:A2:4E:02:04:E7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C45A8478EF7B2435EB56DD8C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 12041 IP address blocks: 2001:500:c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:47:8e:f7:b2:43:5e:b5:6d:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=a326278e-309a-46b5-9db2-daf6b2f17450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cb:9c:6d:3c:c1:0a:24:1d:5b:5e:59:17:97: dd:52:23:82:c4:e6:2b:86:ce:53:0a:66:f1:52:12: 5b:af:c7:c6:d2:c2:1d:00:d5:1b:ee:ea:f2:7f:5e: 85:41:30:d9:fc:66:bd:bc:d0:e7:30:59:5c:c0:7b: c8:42:ba:f4:73:f1:67:08:ec:37:f9:36:b6:8e:be: 7a:98:72:05:25:05:36:d1:09:dc:c6:e5:8e:5c:b2: 56:23:6e:8d:de:a9:bc:1f:8c:9a:45:e1:2a:8e:05: ec:79:61:86:64:34:cb:ae:59:27:9e:a7:18:c5:b9: b9:a0:31:72:62:96:f1:99:a1:ad:50:10:3b:c1:5a: c4:01:5b:0b:06:a3:35:90:d8:7f:df:05:15:02:38: e5:08:51:88:d2:b7:98:a4:ba:d1:9a:21:df:0b:c1: 68:8a:65:7f:a7:90:60:85:55:93:6a:3e:dd:4c:a8: 45:71:5c:95:b3:66:ab:f2:f0:30:ac:80:5a:52:93: 20:e1:36:5c:ec:05:ec:ed:78:de:f0:e5:49:d2:96: 5c:0d:ca:54:e2:e7:99:35:06:bc:ba:67:bc:91:ac: 36:50:e0:b5:8c:fe:53:36:28:51:cd:23:d2:01:ca: 5a:ed:09:e0:ff:9d:cf:7a:27:40:35:2d:86:41:ae: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:19:8C:F3:80:A9:3F:40:58:A2:5D:7A:9B:D5:5E:A2:4E:02:04:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d7:28:88:73:97:f0:36:b7:e8:98:34:36:ba:5e:d0:a3:07: 89:db:3c:bd:b7:23:38:2d:ec:3b:23:b3:9b:14:8e:23:7a:c1: c8:df:e4:fe:f4:13:04:5f:43:e1:b5:e3:03:cf:d2:e1:c5:db: 17:da:ec:72:21:2a:ec:e7:81:fc:ae:74:15:06:cd:df:a6:aa: 72:11:48:24:46:1b:40:ec:8b:48:6c:28:23:dd:d9:66:a6:2d: 46:93:a9:79:9c:39:a9:f6:76:4c:5a:dd:3d:84:09:8d:70:c5: 11:4c:ca:a9:77:6f:3c:45:d9:b8:ac:0f:65:2f:fb:27:82:df: 93:47:46:d2:8a:b4:68:64:7d:f9:0a:da:fa:bc:a3:9d:4e:ad: b9:46:00:11:00:74:4a:bf:db:84:62:f8:78:fe:3e:bb:bf:35: 10:a1:40:ce:ed:31:96:55:75:51:d9:de:35:ff:0d:2b:5b:a0: 7a:4b:d1:b9:1f:27:fc:e1:9c:70:e9:cd:36:3b:15:c3:83:98: d0:e5:37:28:d4:8b:d9:f2:a9:41:34:81:be:72:a8:fd:77:90: 81:a5:5b:83:16:c0:29:a8:b8:bc:f9:83:67:89:f0:ce:ab:4c: 74:9d:32:43:2f:00:ed:2f:b4:f0:c6:fd:7e:b2:a2:96:ac:97: fd:3f:d2:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFqEeO97JDXrVt2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YTMyNjI3OGUtMzA5YS00NmI1LTlkYjItZGFmNmIyZjE3NDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcucbTzBCiQdW15ZF5fdUiOCxOYrhs5TCmbx UhJbr8fG0sIdANUb7uryf16FQTDZ/Ga9vNDnMFlcwHvIQrr0c/FnCOw3+Ta2jr56 mHIFJQU20QncxuWOXLJWI26N3qm8H4yaReEqjgXseWGGZDTLrlknnqcYxbm5oDFy YpbxmaGtUBA7wVrEAVsLBqM1kNh/3wUVAjjlCFGI0reYpLrRmiHfC8FoimV/p5Bg hVWTaj7dTKhFcVyVs2ar8vAwrIBaUpMg4TZc7AXs7Xje8OVJ0pZcDcpU4ueZNQa8 ume8kaw2UOC1jP5TNihRzSPSAcpa7Qng/53PeidANS2GQa7zmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDIZjPOAqT9AWKJdepvVXqJOAgTnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWM4ODZkZTAtNmE5NS0z OTRmLWIwZWMtNzk4MjY0YTljNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABnXKIhzl/A2t+iYNDa6XtCjB4nbPL23Izgt7Dsjs5sUjiN6wcjf 5P70EwRfQ+G14wPP0uHF2xfa7HIhKuzngfyudBUGzd+mqnIRSCRGG0Dsi0hsKCPd 2WamLUaTqXmcOan2dkxa3T2ECY1wxRFMyql3bzxF2bisD2Uv+yeC35NHRtKKtGhk ffkK2vq8o51OrblGABEAdEq/24Ri+Hj+Pru/NRChQM7tMZZVdVHZ3jX/DStboHpL 0bkfJ/zhnHDpzTY7FcODmNDlNyjUi9nyqUE0gb5yqP13kIGlW4MWwCmouLz5g2eJ 8M6rTHSdMkMvAO0vtPDG/X6yopasl/0/0mg= -----END CERTIFICATE-----Generated at Thu Dec 25 14:32:42 2025 by rpki-client